Show connections Flags

iholdings · ‎06-17-2002

Can someone direct me to a document that details the various flags I see when doing a "show connections" on the PIX? Here's a partial example of what I see:

TCP out d_WebServer:4558 in i_DMS_Server:1433 idle 0:05:25 Bytes 645 flags UFRIOB

TCP out 209.25.xxx.xx:80 in 172.xx.xx.41:2467 idle 0:00:11 Bytes 65768 flags UIO

TCP out 209.25.xxx.xx:80 in 172.xx.xx.41:2466 idle 0:00:11 Bytes 68082 flags UIO

TCP out d_WebServer:80 in 172.xx.xx.2:1267 idle 0:00:17 Bytes 36257 flags UIO

etc.

Thanks

bhose · ‎06-17-2002

Checkout:-

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/cmdref/s.htm#xtocid7

Flag Description

U up

f inside FIN

F outside FIN

r inside acknowledged FIN

R outside acknowledged FIN

s awaiting outside SYN

S awaiting inside SYN

M SMTP data

H HTTP get (not used)

T TCP SIP connection

--- SKINNY (not used)

I inbound data

O outbound data

q SQL*Net data

n nailed connection (no supported)

d dump

P inside back connection

E outside back connection

G group

p replicated (unused)

a awaiting outside ACK to SYN

A awaiting inside ACK to SYN

B initial SYN from outside

R RPC

H H.323

T UDP SIP connection

m SIP media connection

t SIP transient connection

D DNS

iholdings · ‎06-18-2002

Thanks - that helps immensely.

bs0000554 · ‎06-18-2002

Great. !

I´we searched this docs also.